Trajectory-Based Authentication Code Validation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional authentication methods are vulnerable to malware attacks, such as keyloggers, which can intercept and reconstruct authentication codes entered by users, even when using virtual alphanumeric pads or biometric data, due to the requirement for specialized devices.
Innovation Solution
A method that generates a digital image with pseudo-randomly positioned graphic elements representing authentication code symbols, where users enter codes by tracing a trajectory through these elements on a display screen, with the server analyzing the trajectory to determine the authentication code, thereby increasing security without needing specialized devices.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a virtual alphanumeric keypad is displayed with randomly distributed symbols to prevent keyloggers, then security against traditional keyloggers is improved, but malware can still retrieve screenshots and analyze mouse placement to reconstruct the authentication code
Solution Approach 1:
The patent transitions from two-dimensional symbolic representation (alphanumeric characters on a virtual keypad) to three-dimensional spatial navigation (moving a point through 3D space to trace a trajectory). This dimensional change makes it difficult for malware to intercept authentication data, as the authentication code is derived from the geometric path rather than discrete selectable symbols.
Solution Approach 2:
The patent replaces the mechanical interaction of clicking or selecting individual symbols with a continuous trajectory-based interaction where the user moves a point through space. This substitution makes it harder for software-based keyloggers to capture authentication data, as the authentication code is embedded in the continuous motion path rather than discrete selection events.
2Reliability
If biometric authentication is used to increase security, then authentication reliability is improved, but specialized peripherals and terminals are required which reduces accessibility
Solution Approach 1:
The patent creates an authentication method that works across multiple device types (terminals with displays and input devices) without requiring specialized biometric peripherals. The trajectory-based authentication can be implemented on standard devices using existing display and input capabilities, making the solution universally applicable while maintaining enhanced security.
3Reliability
If authentication codes are entered through individual symbol selection on a virtual keypad, then security against keyloggers is improved, but malware can still automatically identify characters and reconstruct the code by analyzing screenshots
Solution Approach 1:
The patent embeds the authentication code in the spatial trajectory of a moving point through three-dimensional space rather than in discrete two-dimensional symbol selections. This makes screenshot analysis ineffective, as the authentication data is contained in the continuous path geometry rather than in static visual elements that can be captured and analyzed by malware.
Solution Approach 2:
The patent replaces discrete symbol selection mechanics with continuous trajectory navigation mechanics. Instead of selecting individual characters from a virtual keypad, the user moves a point through 3D space to trace a path that encodes the authentication information, making it difficult for software to intercept and reconstruct the code.
Data Source
Figure 1
Figure 2
Figure 3~4
AI summary
The invention concerns a method for authentication code validation, enabling an authorised user to access a service or a computer system, the authentication code being a sequence of symbols entered by means of a human-machine interface of a user terminal, comprising steps of displaying, on a display screen of the user terminal, an authentication code entry digital image (I) comprising a plurality of symbols superimposed on a background image, obtaining an authentication code entered by a user by selecting symbols among the displayed symbols, and comparing the entered authentication code to a previously recorded authentication code. The method comprises superimposing graphic elements on the background image at randomly determined positions, each graphic element representing a selectable symbol, in order to form the authentication code entry digital image, and obtaining a sequence of spatial coordinates representing successive positions of an application point moved on the authentication code entry digital image by means of a pointing device, thus forming a continuous trajectory (T). The authentication code is determined from this trajectory (T).